nailsapp/common

Registry deprecationdanger

Packagist marks the entire package abandoned and provides no replacement, which is a substantial adoption and maintenance risk despite the repository remaining active.

Release historydanger

The latest registry release was in September 2018, with no releases in the last 12 months; this leaves the published dependency about eight years stale.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a framework package.

Version stabilitycaution

Version 0.3.0 is not a prerelease, so its version label is not itself a concern, but the low major version offers limited maturity evidence alongside the stale release history.

Workflow auditcaution

All nine analyzed action references are unpinned, and the audit found two high-confidence template-injection findings. No dangerous trigger or untrusted checkout was reported, so this is workflow hygiene risk rather than a standalone severe finding.